Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

Gentoo: GLSA-202310-12 Normal: Xfce Terminal Security Vulnerability Exploit

gentoo
Calendar Grey August 11, 2007
Scroller Gentoo
A flaw in Xfce Terminal may lead to remote code execution. Update now to avoid potential exploits. Refer to the advisory for more information.
A vulnerability has been discovered in the Xfce Terminal program, allowing for the remote execution of arbitrary code.

Summary

Gentoo Linux Security Advisory GLSA 200708-07 https://security.gentoo.org/ Severity: Normal Title: Xfce Terminal: Remote arbitrary code execution Date: August 11, 2007 Bugs: #184886 ID: 200708-07

Synopsis ======= A vulnerability has been discovered in the Xfce Terminal program, allowing for the remote execution of arbitrary code.
Background ========= Xfce Terminal is a console tool for the Xfce desktop environment.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 xfce-extra/terminal < 0.2.6_p25931 >= 0.2.6_p25931
========== Lasse Karkkainen discovered that the function terminal_helper_execute() in file terminal-helper.c does not properly escape the URIs before processing.
...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory gentoo code execution remote execution arbitrary code normal xfce terminal

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory gentoo code execution remote execution arbitrary code normal xfce terminal

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround